Vulnerability database
Every flaw the U.S. government’s cybersecurity agency (CISA) has confirmed attackers are using, plus the new WordPress plugin and theme bugs published each day, sorted by what they mean for a small business. We refresh it twice a day. If you see something your website or office runs, tell us.
288 results · page 2 of 6
Jun 13, 2022Vulnerability of residual files not being deleted after an update in the ChinaDRM module.CVE-2021-46813 · Other software · Huawei · reported by psirt@huawei.comHigh 7.5
Vulnerability of residual files not being deleted after an update in the ChinaDRM module. Successful exploitation of this vulnerability may affect availability.
- Product
- EMUI
- What to do
- Apply the vendor’s update. The NVD record links to the advisory.
Full record and what to do →NVD recordconsumer.huawei.comconsumer.huawei.com
May 13, 2022The DFX module has a UAF vulnerability.Successful exploitation of this vulnerability may affect system stability.CVE-2022-22252 · Other software · Huawei · reported by psirt@huawei.comHigh 7.5
The DFX module has a UAF vulnerability.Successful exploitation of this vulnerability may affect system stability.
- Product
- Emui
- What to do
- Apply the vendor’s update. The NVD record links to the advisory.
Full record and what to do →NVD recordconsumer.huawei.comdevice.harmonyos.com
May 13, 2022There is a configuration defect in the activation lock of mobile phones.Successful exploitation of this vulnerability may affect application availability.CVE-2022-29793 · Other software · Huawei · reported by psirt@huawei.comHigh 7.5
There is a configuration defect in the activation lock of mobile phones.Successful exploitation of this vulnerability may affect application availability.
- Product
- Emui
- What to do
- Apply the vendor’s update. The NVD record links to the advisory.
Full record and what to do →NVD recordconsumer.huawei.comconsumer.huawei.com
May 13, 2022Configuration defects in the secure OS module.CVE-2021-46789 · Other software · Huawei · reported by psirt@huawei.comHigh 7.5
Configuration defects in the secure OS module. Successful exploitation of this vulnerability can affect availability.
- Product
- Emui
- What to do
- Apply the vendor’s update. The NVD record links to the advisory.
Full record and what to do →NVD recordconsumer.huawei.comconsumer.huawei.com
May 13, 2022Third-party pop-up window coverage vulnerability in the iConnect module.Successful exploitation of this vulnerability may cause system pop-up window may be coveCVE-2021-46788 · Other software · Huawei · reported by psirt@huawei.comHigh 7.5
Third-party pop-up window coverage vulnerability in the iConnect module.Successful exploitation of this vulnerability may cause system pop-up window may be covered to mislead users to perform incorrect operations.
- Product
- EMUI
- What to do
- Apply the vendor’s update. The NVD record links to the advisory.
Full record and what to do →NVD recordconsumer.huawei.comconsumer.huawei.com
Apr 11, 2022The Wi-Fi module has an event notification vulnerability.Successful exploitation of this vulnerability may allow third-party applications to intercept event notCVE-2022-22258 · Other software · Huawei · reported by psirt@huawei.comCritical 9.8
The Wi-Fi module has an event notification vulnerability.Successful exploitation of this vulnerability may allow third-party applications to intercept event notifications and add information and result in elevation-of-privilege.
- Product
- Emui
- What to do
- Apply the vendor’s update. The NVD record links to the advisory.
Full record and what to do →NVD recordconsumer.huawei.comconsumer.huawei.com
Mar 30, 2022In SystemUI, there is a possible arbitrary Activity launch due to a confused deputy.CVE-2021-39787 · Computers, phones & browsers · Google · reported by security@android.comHigh 7.8
In SystemUI, there is a possible arbitrary Activity launch due to a confused deputy. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is needed for exploitation.Product: AndroidVersions: Android-12LAndroid ID: A-202506934
- Product
- Android
- What to do
- Apply the vendor’s update. The NVD record links to the advisory.
Full record and what to do →NVD recordsource.android.comsource.android.com
Mar 10, 2022There is a heap-based buffer overflow vulnerability in system components.CVE-2021-40064 · Other software · Huawei · reported by psirt@huawei.comHigh 7.5
There is a heap-based buffer overflow vulnerability in system components. Successful exploitation of this vulnerability may affect system stability.
- Product
- EMUI
- What to do
- Apply the vendor’s update. The NVD record links to the advisory.
Full record and what to do →NVD recordconsumer.huawei.comdevice.harmonyos.com
Mar 10, 2022There is an improper access control vulnerability in the video module.CVE-2021-40063 · Other software · Huawei · reported by psirt@huawei.comHigh 7.5
There is an improper access control vulnerability in the video module. Successful exploitation of this vulnerability may affect confidentiality.
- Product
- EMUI
- What to do
- Apply the vendor’s update. The NVD record links to the advisory.
Full record and what to do →NVD recordconsumer.huawei.comdevice.harmonyos.com
Mar 10, 2022There is a vulnerability of copying input buffer without checking its size in the video framework.CVE-2021-40062 · Other software · Huawei · reported by psirt@huawei.comHigh 7.5
There is a vulnerability of copying input buffer without checking its size in the video framework. Successful exploitation of this vulnerability may affect availability.
- Product
- EMUI
- What to do
- Apply the vendor’s update. The NVD record links to the advisory.
Full record and what to do →NVD recordconsumer.huawei.comconsumer.huawei.com
Mar 10, 2022There is a vulnerability of accessing resources using an incompatible type (type confusion) in the Bastet module.CVE-2021-40061 · Other software · Huawei · reported by psirt@huawei.comHigh 7.5
There is a vulnerability of accessing resources using an incompatible type (type confusion) in the Bastet module. Successful exploitation of this vulnerability may affect integrity.
- Product
- EMUI
- What to do
- Apply the vendor’s update. The NVD record links to the advisory.
Full record and what to do →NVD recordconsumer.huawei.comdevice.harmonyos.com
Mar 10, 2022There is a heap-based buffer overflow vulnerability in the video framework.CVE-2021-40060 · Other software · Huawei · reported by psirt@huawei.comHigh 7.5
There is a heap-based buffer overflow vulnerability in the video framework. Successful exploitation of this vulnerability may affect availability.
- Product
- EMUI
- What to do
- Apply the vendor’s update. The NVD record links to the advisory.
Full record and what to do →NVD recordconsumer.huawei.comconsumer.huawei.com
Mar 10, 2022There is a permission control vulnerability in the Wi-Fi module.CVE-2021-40059 · Other software · Huawei · reported by psirt@huawei.comMedium 6.5
There is a permission control vulnerability in the Wi-Fi module. Successful exploitation of this vulnerability may affect confidentiality.
- Product
- EMUI
- What to do
- Apply the vendor’s update. The NVD record links to the advisory.
Full record and what to do →NVD recordconsumer.huawei.comconsumer.huawei.com
Mar 10, 2022There is a heap-based buffer overflow vulnerability in the video framework.CVE-2021-40058 · Other software · Huawei · reported by psirt@huawei.comHigh 7.5
There is a heap-based buffer overflow vulnerability in the video framework. Successful exploitation of this vulnerability may affect availability.
- Product
- EMUI
- What to do
- Apply the vendor’s update. The NVD record links to the advisory.
Full record and what to do →NVD recordconsumer.huawei.comconsumer.huawei.com
Mar 10, 2022There is a heap-based and stack-based buffer overflow vulnerability in the video framework.CVE-2021-40057 · Other software · Huawei · reported by psirt@huawei.comHigh 7.5
There is a heap-based and stack-based buffer overflow vulnerability in the video framework. Successful exploitation of this vulnerability may affect availability.
- Product
- EMUI
- What to do
- Apply the vendor’s update. The NVD record links to the advisory.
Full record and what to do →NVD recordconsumer.huawei.comconsumer.huawei.com
Mar 10, 2022There is a vulnerability of copying input buffer without checking its size in the video framework.CVE-2021-40056 · Other software · Huawei · reported by psirt@huawei.comHigh 7.5
There is a vulnerability of copying input buffer without checking its size in the video framework. Successful exploitation of this vulnerability may affect availability.
- Product
- EMUI
- What to do
- Apply the vendor’s update. The NVD record links to the advisory.
Full record and what to do →NVD recordconsumer.huawei.comconsumer.huawei.com
Mar 10, 2022There is a man-in-the-middle attack vulnerability during system update download in recovery mode.CVE-2021-40055 · Other software · Huawei · reported by psirt@huawei.comMedium 5.9
There is a man-in-the-middle attack vulnerability during system update download in recovery mode. Successful exploitation of this vulnerability may affect integrity.
- Product
- EMUI
- What to do
- Apply the vendor’s update. The NVD record links to the advisory.
Full record and what to do →NVD recordconsumer.huawei.comdevice.harmonyos.com
Mar 10, 2022There is an integer underflow vulnerability in the atcmdserver module.CVE-2021-40054 · Other software · Huawei · reported by psirt@huawei.comHigh 7.5
There is an integer underflow vulnerability in the atcmdserver module. Successful exploitation of this vulnerability may affect integrity.
- Product
- EMUI
- What to do
- Apply the vendor’s update. The NVD record links to the advisory.
Full record and what to do →NVD recordconsumer.huawei.comconsumer.huawei.com
Mar 10, 2022There is a permission control vulnerability in the Nearby module.Successful exploitation of this vulnerability will affect availability and integrity.CVE-2021-40053 · Other software · Huawei · reported by psirt@huawei.comCritical 9.1
There is a permission control vulnerability in the Nearby module.Successful exploitation of this vulnerability will affect availability and integrity.
- Product
- Emui
- What to do
- Apply the vendor’s update. The NVD record links to the advisory.
Full record and what to do →NVD recordconsumer.huawei.comdevice.harmonyos.com
Mar 10, 2022There is an unauthorized access vulnerability in system components.CVE-2021-40051 · Other software · Huawei · reported by psirt@huawei.comHigh 7.5
There is an unauthorized access vulnerability in system components. Successful exploitation of this vulnerability will affect confidentiality.
- Product
- EMUI
- What to do
- Apply the vendor’s update. The NVD record links to the advisory.
Full record and what to do →NVD recordconsumer.huawei.comdevice.harmonyos.com
Mar 10, 2022There is an out-of-bounds read vulnerability in the IFAA module.CVE-2021-40050 · Other software · Huawei · reported by psirt@huawei.comCritical 9.8
There is an out-of-bounds read vulnerability in the IFAA module. Successful exploitation of this vulnerability may cause stack overflow.
- Product
- EMUI
- What to do
- Apply the vendor’s update. The NVD record links to the advisory.
Full record and what to do →NVD recordconsumer.huawei.comdevice.harmonyos.com
Mar 10, 2022There is a permission control vulnerability in the PMS module.CVE-2021-40049 · Other software · Huawei · reported by psirt@huawei.comHigh 7.5
There is a permission control vulnerability in the PMS module. Successful exploitation of this vulnerability can lead to sensitive system information being obtained without authorization.
- Product
- EMUI
- What to do
- Apply the vendor’s update. The NVD record links to the advisory.
Full record and what to do →NVD recordconsumer.huawei.comdevice.harmonyos.com
Mar 10, 2022There is an incorrect buffer size calculation vulnerability in the video framework.CVE-2021-40048 · Other software · Huawei · reported by psirt@huawei.comHigh 7.5
There is an incorrect buffer size calculation vulnerability in the video framework. Successful exploitation of this vulnerability will affect availability.
- Product
- EMUI
- What to do
- Apply the vendor’s update. The NVD record links to the advisory.
Full record and what to do →NVD recordconsumer.huawei.comdevice.harmonyos.com
Mar 10, 2022There is a vulnerability of memory not being released after effective lifetime in the Bastet module.CVE-2021-40047 · Other software · Huawei · reported by psirt@huawei.comHigh 7.5
There is a vulnerability of memory not being released after effective lifetime in the Bastet module. Successful exploitation of this vulnerability may affect integrity.
- Product
- EMUI
- What to do
- Apply the vendor’s update. The NVD record links to the advisory.
Full record and what to do →NVD recordconsumer.huawei.comdevice.harmonyos.com
Feb 25, 2022There is an improper permission management vulnerability in the Wallet apps.CVE-2021-37103 · Other software · Huawei · reported by psirt@huawei.comMedium 5.5
There is an improper permission management vulnerability in the Wallet apps. Successful exploitation of this vulnerability may affect service confidentiality.
- Product
- EMUI
- What to do
- Apply the vendor’s update. The NVD record links to the advisory.
Full record and what to do →NVD recordconsumer.huawei.comconsumer.huawei.com
Feb 25, 2022There is a DoS vulnerability in smartphones.CVE-2021-37027 · Other software · Huawei · reported by psirt@huawei.comHigh 7.5
There is a DoS vulnerability in smartphones. Successful exploitation of this vulnerability may affect service integrity.
- Product
- EMUI
- What to do
- Apply the vendor’s update. The NVD record links to the advisory.
Full record and what to do →NVD recordconsumer.huawei.comconsumer.huawei.com
Feb 25, 2022There is a DoS vulnerability in smartphones.CVE-2021-22489 · Other software · Huawei · reported by psirt@huawei.comHigh 7.5
There is a DoS vulnerability in smartphones. Successful exploitation of this vulnerability may affect service availability.
- Product
- EMUI
- What to do
- Apply the vendor’s update. The NVD record links to the advisory.
Full record and what to do →NVD recordconsumer.huawei.comdevice.harmonyos.com
Feb 25, 2022There is an improper verification vulnerability in smartphones.CVE-2021-22448 · Other software · Huawei · reported by psirt@huawei.comCritical 9.1
There is an improper verification vulnerability in smartphones. Successful exploitation of this vulnerability may cause unauthorized read and write of some files.
- Product
- EMUI
- What to do
- Apply the vendor’s update. The NVD record links to the advisory.
Full record and what to do →NVD recordconsumer.huawei.comconsumer.huawei.com
Feb 25, 2022There is a software integer overflow leading to a TOCTOU condition in smartphones.CVE-2021-22437 · Other software · Huawei · reported by psirt@huawei.comHigh 7
There is a software integer overflow leading to a TOCTOU condition in smartphones. Successful exploitation of this vulnerability may cause random address access.
- Product
- EMUI
- What to do
- Apply the vendor’s update. The NVD record links to the advisory.
Full record and what to do →NVD recordconsumer.huawei.comconsumer.huawei.com
Feb 25, 2022There is a memory address out of bounds vulnerability in smartphones.CVE-2021-22434 · Other software · Huawei · reported by psirt@huawei.comCritical 9.8
There is a memory address out of bounds vulnerability in smartphones. Successful exploitation of this vulnerability may cause malicious code to be executed.
- Product
- EMUI
- What to do
- Apply the vendor’s update. The NVD record links to the advisory.
Full record and what to do →NVD recordconsumer.huawei.comdevice.harmonyos.com
Feb 25, 2022There is a memory address out of bounds in smartphones.CVE-2021-22433 · Other software · Huawei · reported by psirt@huawei.comCritical 9.8
There is a memory address out of bounds in smartphones. Successful exploitation of this vulnerability may cause malicious code to be executed.
- Product
- EMUI
- What to do
- Apply the vendor’s update. The NVD record links to the advisory.
Full record and what to do →NVD recordconsumer.huawei.comdevice.harmonyos.com
Feb 25, 2022There is a vulnerability when configuring permission isolation in smartphones.CVE-2021-22432 · Other software · Huawei · reported by psirt@huawei.comCritical 9.8
There is a vulnerability when configuring permission isolation in smartphones. Successful exploitation of this vulnerability may cause out-of-bounds access.
- Product
- EMUI
- What to do
- Apply the vendor’s update. The NVD record links to the advisory.
Full record and what to do →NVD recordconsumer.huawei.comdevice.harmonyos.com
Feb 25, 2022There is a vulnerability when configuring permission isolation in smartphones.CVE-2021-22431 · Other software · Huawei · reported by psirt@huawei.comCritical 9.8
There is a vulnerability when configuring permission isolation in smartphones. Successful exploitation of this vulnerability may cause out-of-bounds access.
- Product
- EMUI
- What to do
- Apply the vendor’s update. The NVD record links to the advisory.
Full record and what to do →NVD recordconsumer.huawei.comdevice.harmonyos.com
Feb 25, 2022There is a logic bypass vulnerability in smartphones.CVE-2021-22430 · Other software · Huawei · reported by psirt@huawei.comCritical 9.8
There is a logic bypass vulnerability in smartphones. Successful exploitation of this vulnerability may cause code injection.
- Product
- EMUI
- What to do
- Apply the vendor’s update. The NVD record links to the advisory.
Full record and what to do →NVD recordconsumer.huawei.comdevice.harmonyos.com
Feb 25, 2022There is a memory address out of bounds in smartphones.CVE-2021-22429 · Other software · Huawei · reported by psirt@huawei.comCritical 9.8
There is a memory address out of bounds in smartphones. Successful exploitation of this vulnerability may cause malicious code to be executed.
- Product
- EMUI
- What to do
- Apply the vendor’s update. The NVD record links to the advisory.
Full record and what to do →NVD recordconsumer.huawei.comdevice.harmonyos.com
Feb 25, 2022There is a memory address out of bounds in smartphones.CVE-2021-22426 · Other software · Huawei · reported by psirt@huawei.comCritical 9.8
There is a memory address out of bounds in smartphones. Successful exploitation of this vulnerability may cause malicious code to be executed.
- Product
- EMUI
- What to do
- Apply the vendor’s update. The NVD record links to the advisory.
Full record and what to do →NVD recordconsumer.huawei.comdevice.harmonyos.com
Feb 25, 2022There is a code injection vulnerability in smartphones.CVE-2021-22395 · Other software · Huawei · reported by psirt@huawei.comHigh 7.5
There is a code injection vulnerability in smartphones. Successful exploitation of this vulnerability may affect service confidentiality.
- Product
- EMUI
- What to do
- Apply the vendor’s update. The NVD record links to the advisory.
Full record and what to do →NVD recordconsumer.huawei.comdevice.harmonyos.com
Feb 25, 2022There is a buffer overflow vulnerability in smartphones.CVE-2021-22394 · Other software · Huawei · reported by psirt@huawei.comCritical 9.1
There is a buffer overflow vulnerability in smartphones. Successful exploitation of this vulnerability may cause DoS of the apps during Multi-Screen Collaboration.
- Product
- EMUI
- What to do
- Apply the vendor’s update. The NVD record links to the advisory.
Full record and what to do →NVD recordconsumer.huawei.comdevice.harmonyos.com
Feb 25, 2022There is an improper verification vulnerability in smartphones.CVE-2021-22319 · Other software · Huawei · reported by psirt@huawei.comHigh 7.5
There is an improper verification vulnerability in smartphones. Successful exploitation of this vulnerability may cause integer overflows.
- Product
- EMUI
- What to do
- Apply the vendor’s update. The NVD record links to the advisory.
Full record and what to do →NVD recordconsumer.huawei.comdevice.harmonyos.com
Feb 9, 2022There is a vulnerability of signature verification mechanism failure in system upgrade through recovery mode.Successful exploitation of this vulnerability may aCVE-2021-40045 · Other software · Huawei · reported by psirt@huawei.comMedium 5.5
There is a vulnerability of signature verification mechanism failure in system upgrade through recovery mode.Successful exploitation of this vulnerability may affect service confidentiality.
- Product
- EMUI
- What to do
- Apply the vendor’s update. The NVD record links to the advisory.
Full record and what to do →NVD recordconsumer.huawei.comdevice.harmonyos.com
Feb 9, 2022There is a permission verification vulnerability in the Bluetooth module.Successful exploitation of this vulnerability may cause unauthorized operations.CVE-2021-40044 · Other software · Huawei · reported by psirt@huawei.comHigh 8.8
There is a permission verification vulnerability in the Bluetooth module.Successful exploitation of this vulnerability may cause unauthorized operations.
- Product
- EMUI
- What to do
- Apply the vendor’s update. The NVD record links to the advisory.
Full record and what to do →NVD recordconsumer.huawei.comconsumer.huawei.com
Feb 9, 2022There is a race condition vulnerability in the binder driver subsystem in the kernel.Successful exploitation of this vulnerability may affect kernel stability.CVE-2021-40015 · Other software · Huawei · reported by psirt@huawei.comMedium 4.7
There is a race condition vulnerability in the binder driver subsystem in the kernel.Successful exploitation of this vulnerability may affect kernel stability.
- Product
- EMUI
- What to do
- Apply the vendor’s update. The NVD record links to the advisory.
Full record and what to do →NVD recordconsumer.huawei.comdevice.harmonyos.com
Feb 9, 2022There is a vulnerability of unstrict input parameter verification in the audio assembly.Successful exploitation of this vulnerability may cause out-of-bounds acCVE-2021-39997 · Other software · Huawei · reported by psirt@huawei.comCritical 9.8
There is a vulnerability of unstrict input parameter verification in the audio assembly.Successful exploitation of this vulnerability may cause out-of-bounds access.
- Product
- EMUI
- What to do
- Apply the vendor’s update. The NVD record links to the advisory.
Full record and what to do →NVD recordconsumer.huawei.comconsumer.huawei.com
Feb 9, 2022There is an arbitrary address access vulnerability with the product line test code.Successful exploitation of this vulnerability may affect service confidentialCVE-2021-39994 · Other software · Huawei · reported by psirt@huawei.comCritical 9.8
There is an arbitrary address access vulnerability with the product line test code.Successful exploitation of this vulnerability may affect service confidentiality, integrity, and availability.
- Product
- EMUI
- What to do
- Apply the vendor’s update. The NVD record links to the advisory.
Full record and what to do →NVD recordconsumer.huawei.comconsumer.huawei.com
Feb 9, 2022There is an improper security permission configuration vulnerability on ACPU.Successful exploitation of this vulnerability may affect service confidentiality, iCVE-2021-39992 · Other software · Huawei · reported by psirt@huawei.comHigh 7.8
There is an improper security permission configuration vulnerability on ACPU.Successful exploitation of this vulnerability may affect service confidentiality, integrity, and availability.
- Product
- EMUI
- What to do
- Apply the vendor’s update. The NVD record links to the advisory.
Full record and what to do →NVD recordconsumer.huawei.comconsumer.huawei.com
Feb 9, 2022There is an unauthorized rewriting vulnerability with the memory access management module on ACPU.Successful exploitation of this vulnerability may affect serviCVE-2021-39991 · Other software · Huawei · reported by psirt@huawei.comMedium 5.5
There is an unauthorized rewriting vulnerability with the memory access management module on ACPU.Successful exploitation of this vulnerability may affect service confidentiality.
- Product
- EMUI
- What to do
- Apply the vendor’s update. The NVD record links to the advisory.
Full record and what to do →NVD recordconsumer.huawei.comconsumer.huawei.com
Feb 9, 2022There is an unauthorized rewriting vulnerability with the memory access management module on ACPU.Successful exploitation of this vulnerability may affect serviCVE-2021-39986 · Other software · Huawei · reported by psirt@huawei.comMedium 5.5
There is an unauthorized rewriting vulnerability with the memory access management module on ACPU.Successful exploitation of this vulnerability may affect service confidentiality.
- Product
- EMUI
- What to do
- Apply the vendor’s update. The NVD record links to the advisory.
Full record and what to do →NVD recordconsumer.huawei.comconsumer.huawei.com
Feb 9, 2022There is an unauthorized rewriting vulnerability with the memory access management module on ACPU.Successful exploitation of this vulnerability may affect serviCVE-2021-37115 · Other software · Huawei · reported by psirt@huawei.comMedium 5.5
There is an unauthorized rewriting vulnerability with the memory access management module on ACPU.Successful exploitation of this vulnerability may affect service confidentiality.
- Product
- EMUI
- What to do
- Apply the vendor’s update. The NVD record links to the advisory.
Full record and what to do →NVD recordconsumer.huawei.comconsumer.huawei.com
Feb 9, 2022There is a security protection bypass vulnerability with the modem.Successful exploitation of this vulnerability may cause memory protection failure.CVE-2021-37109 · Other software · Huawei · reported by psirt@huawei.comHigh 7.8
There is a security protection bypass vulnerability with the modem.Successful exploitation of this vulnerability may cause memory protection failure.
- Product
- EMUI
- What to do
- Apply the vendor’s update. The NVD record links to the advisory.
Full record and what to do →NVD recordconsumer.huawei.comconsumer.huawei.com
Feb 9, 2022There is an improper memory access permission configuration on ACPU.Successful exploitation of this vulnerability may cause out-of-bounds access.CVE-2021-37107 · Other software · Huawei · reported by psirt@huawei.comMedium 5.5
There is an improper memory access permission configuration on ACPU.Successful exploitation of this vulnerability may cause out-of-bounds access.
- Product
- EMUI
- What to do
- Apply the vendor’s update. The NVD record links to the advisory.
Full record and what to do →NVD recordconsumer.huawei.comconsumer.huawei.com
Where this comes from: the exploited list is CISA’s Known Exploited Vulnerabilities catalog. Everything else is the whole National Vulnerability Database, where each record is published by the team that found the bug (Wordfence, Patchstack, WPScan, the vendors themselves and others); we show who. Exploit odds are FIRST’s EPSS, updated daily. Titles and categories are ours, so check the linked record before acting on a detail. For a write-up of the big ones, see our advisories. Every vendor, and every WordPress plugin and theme with a recorded flaw, also has its own page. All of it is free to reuse as JSON, CSV or RSS.
Weekly security brief
The flaws that hit local websites, every Friday.
One short email: what got exploited this week, which WordPress plugins broke, and what to check. Unsubscribe in one click.
Tell us what you're building.
A website, your marketing, a security check, an app, or the thing you've been running out of a spreadsheet for three years. A few lines is plenty.
Not ready to talk yet? Run the free website check and see what Google sees.